/mcpYou must use a new softkey template without supplementary service softkeys for a protected phone. b. Check the Protected Device check box. Step 4 Navigate to the Protocol Specific Information pane. Step 5 From the Device Security Profile drop-down list, choose an encrypted security phone profile that is already configured in the Phone Security Profile Configuration page. Step 6 Click Save. Secure Calls and Tones Limitations and Restrictions The following are the limitations and restrictions with reference to the secure calls and tones: Table 31: Secure Icons and Secure Tones Interactions and Restrictions Interactions and Restrictions Feature Secure icons not supported over H.323 trunks H.323 Trunks The encryption lock icon may not display on the phone when you perform tasks such as transferring or putting a call on hold. The status changes from encrypted to non-secure if the media streams that are associated with these tasks are not encrypted. Call Transfer and Hold For calls that involve the PSTN, the security icon shows the security status for only the IP domain portion of the call. PSTN calls With secure icons: • Non secure or authenticated Cisco IP Phones can barge encrypted calls. The security icon indicates the security status for the conference calls. With secure tones: • If a caller barges a secure SIP call, the system provides tone-on-hold, and Unified Communications Manager classifies the call as non secure during the tone. • If a caller barges a secure SCCP call, the system uses an internal tone-playing mechanism at the target device and the status remains secure. Barge Security Guide for Cisco Unified Communications Manager, Release 15 and SUs 179 Basic System Security Secure Calls and Tones Limitations and Restrictions